feat(execution): create a package metadata object at publish time by miker83z · Pull Request #9461 · iotaledger/iota

miker83z · 2025-11-27T21:55:51Z

Description of change

This PR introduces the creation of a Package Metadata immutable object during a package publishing/upgrade. This allows to use such metadata to create AuthenticatorInfoV1 instances for accounts.

Internal AA architecture document.

Description:

every time a function uses the #[authenticator] annotation, the node’s publish/upgrade execution tries to create a PackageMetadata immutable object.
a new set of functions in the iota-verifier crate implement the checking of the requirements for a package metadata to be valid; the information for such validation is extracted from the package bytecode (see feat(move): Add custom attributes #9453)
iota-verifier::verify_authenticate_func_v1 checks the correctness of the declared authenticate() function (that was previously annotated with #[authenticator])
once the PackageMetadata immutable object is created, then the framework method create_auth_info_v1 can be used as the only way to create an AuthenticatorInfoV1 instance.
the AuthenticatorInfoV1 struct includes the fields to uniquely identify a function on-chain: package id, module name, function name.
An Account object is an object with a dynamic field being a AuthenticatorInfoV1.
Then, to any user-created object, an AuthenticatorInfoV1 can be “attached“. The only requirement is that the AuthenticatorInfoV1 is compatible with T, where T is exactly the type of the object set to become an Account.

How the change has been tested

Basic tests (linting, compilation, formatting, unit/integration tests)
Patch-specific tests (correctness, functionality coverage)
I have added tests that prove my fix is effective or that my feature works
I have checked that new and existing unit tests pass locally with my changes

Release Notes

Protocol: Add the publish_package_metadata. This enables the creation of an immutable object at publish/upgrade time when some known attributes (e.g., the authenticator function attribute) are found in the source code.
Nodes (Validators and Full nodes):
Indexer:
JSON-RPC:
GraphQL:
CLI:
Rust SDK:
REST API:

vercel · 2025-11-27T21:55:56Z

The latest updates on your projects. Learn more about Vercel for GitHub.

6 Skipped Deployments

Project	Deployment	Preview	Updated (UTC)
apps-backend	Ignored	Preview	Dec 4, 2025 8:27am
apps-ui-kit	Ignored	Preview	Dec 4, 2025 8:27am
iota-evm-bridge	Ignored	Preview	Dec 4, 2025 8:27am
iota-multisig-toolkit	Ignored	Preview	Dec 4, 2025 8:27am
rebased-explorer	Ignored	Preview	Dec 4, 2025 8:27am
wallet-dashboard	Ignored	Preview	Dec 4, 2025 8:27am

crates/iota-framework-snapshot/manifest.json

thibault-martinez

Approving crates/iota-open-rpc/spec/openrpc.json

Co-authored-by: Valerii Reutov <valeriy.reutov@gmail.com> Co-authored-by: Pavlo Botnar <pavlo.botnar@gmail.com>

crates/iota-framework/packages/iota-framework/sources/package_metadata.move

…esting

alexsporn · 2025-12-03T13:49:48Z

crates/iota-framework/packages/iota-framework/sources/programmable_transaction.move

+
+// === Constants ===
+
+const EInvalidEnumVariant: u64 = 0;


Why not use the newer error syntax?

Removed in ac957d3. Now public functions return options.

alexsporn · 2025-12-03T13:51:09Z

crates/iota-framework/packages/iota-framework/sources/programmable_transaction.move

+    MergeCoins(Argument, vector<Argument>),
+    Publish(vector<vector<u8>>, vector<ID>),
+    MakeMoveVec(Option<TypeName>, vector<Argument>),
+    Upgrade(vector<vector<u8>>, vector<ID>, ID, Argument),


Maybe add comments here to explain the fields

In ac957d3 these now have dedicated structs.

alexsporn · 2025-12-03T14:40:42Z

crates/iota-types/src/auth_context.rs

+    }
+}
+
+// TODO: add a deserializer that can handle the Command::MoveCall and


what about this TODO?

Currently we have no need of a deserializer (we have no usage from Move->Rust but only from Rust->Move). In any case we plan dedicated structs for a new AuthContext version (see #9505) that will probably not need dedicated de/serializers.
Do you think I should I remove the todo?

alexsporn

lgtm 🚀

) This PR introduces the creation of a Package Metadata immutable object during a package publishing/upgrade. This allows to use such metadata to create `AuthenticatorInfoV1` instances for accounts. [Internal AA architecture document](https://iotafoundation.atlassian.net/wiki/x/EoBOng). Description: - every time a function uses the `#[authenticator]` annotation, the node’s publish/upgrade execution tries to create a `PackageMetadata` immutable object. - a new set of functions in the `iota-verifier` crate implement the checking of the requirements for a package metadata to be valid; the information for such validation is extracted from the package bytecode (see #9453) - `iota-verifier::verify_authenticate_func_v1` checks the correctness of the declared authenticate() function (that was previously annotated with - once the PackageMetadata immutable object is created, then the framework method `create_auth_info_v1` can be used as the only way to create an `AuthenticatorInfoV1` instance. - the `AuthenticatorInfoV1` struct includes the fields to uniquely identify a function on-chain: package id, module name, function name. - An Account object is an object with a dynamic field being a `AuthenticatorInfoV1`. - Then, to any user-created object, an `AuthenticatorInfoV1` can be “attached“. The only requirement is that the AuthenticatorInfoV1<T> is compatible with T, where T is exactly the type of the object set to become an Account. - [x] Basic tests (linting, compilation, formatting, unit/integration tests) - [x] Patch-specific tests (correctness, functionality coverage) - [x] I have added tests that prove my fix is effective or that my feature works - [x] I have checked that new and existing unit tests pass locally with my changes - [x] Protocol: Add the publish_package_metadata. This enables the creation of an immutable object at publish/upgrade time when some known attributes (e.g., the authenticator function attribute) are found in the source code. - [ ] Nodes (Validators and Full nodes): - [ ] Indexer: - [ ] JSON-RPC: - [ ] GraphQL: - [ ] CLI: - [ ] Rust SDK: - [ ] REST API: --------- Co-authored-by: Valerii Reutov <valeriy.reutov@gmail.com> Co-authored-by: Pavlo Botnar <pavlo.botnar@gmail.com>

# Description of change Enables Account Abstraction core features at the protocol level. [Internal AA architecture document](https://iotafoundation.atlassian.net/wiki/x/EoBOng). Main protocol changes: - feat(move): Add custom attributes #9453 - added a generic FlavoredAttribute which can then allow us to define new attributes within the iota_mode Move compiler part; - allow the insertion of specific metadata in the serialized compiled modules, i.e., bytecode (protocol feature flag `metadata_in_module_bytes`). - feat(execution): create a package metadata object at publish time #9461 - every time a function uses the `#[authenticator]` annotation, the node’s publish/upgrade execution tries to create a `PackageMetadata` immutable object; - a new set of functions in the `iota-verifier` crate implement the checking of the requirements for a package metadata to be valid; - once the PackageMetadata immutable object is created, then the framework method `create_auth_function_ref_v1` can be used as the only way to create an `AuthenticatorFunctionRefV1` instance. - the `AuthenticatorFunctionRefV1` struct includes the fields to uniquely identify a function on-chain: package id, module name, function name. - An Account object is an object with a dynamic field being a `AuthenticatorFunctionRefV1`. - feat: Add the MoveAuthenticator generic signature variant and enable AA transactions #9492 - introduced a new iota type to represent a new `GenericSignature` variant, that is the `MoveAuthenticator` type, and a execution path to authenticate an Account being the sender of a TX. - The `MoveAuthenticator` type has a unique field which is `call_args`; this is a vector of `CallArg` working similarly to the `ProgrammableTransactionBlock` inputs. - The `MoveAuthenticator` is used to pass the inputs to the move call indicated by the `AuthenticatorFunctionRefV1` found attached to the Account object. - This authentication job is performed by the Validator, which: (1) loads `MoveAuthenticator` input objects at a specific version; (2) then, executes the `authenticate()` function referenced by `AuthenticatorFunctionRefV1`, having no effects to store to the ledger.

miker83z self-assigned this Nov 27, 2025

miker83z added the vm-language Issues related to the VM & Language Team label Nov 27, 2025

iota-ci added the sc-platform Issues related to the Smart Contract Platform group. label Nov 27, 2025

alexsporn reviewed Nov 28, 2025

View reviewed changes

crates/iota-framework-snapshot/manifest.json Show resolved Hide resolved

miker83z mentioned this pull request Dec 1, 2025

feat(move): Add custom attributes #9453

Merged

8 tasks

miker83z force-pushed the vm-lang/aa-auth/authenticator-and-package-metadata branch 2 times, most recently from 5288473 to 570d91a Compare December 1, 2025 15:51

miker83z marked this pull request as ready for review December 1, 2025 15:51

miker83z requested review from a team as code owners December 1, 2025 15:51

thibault-martinez approved these changes Dec 1, 2025

View reviewed changes

kodemartin approved these changes Dec 1, 2025

View reviewed changes

bingyanglin approved these changes Dec 2, 2025

View reviewed changes

Base automatically changed from vm-lang/cherry-pick-for-move-view to vm-lang/aa-auth/8805-beta-feature-branch December 2, 2025 12:59

feat(execution): create a package metadata object at publish time

84c27eb

Co-authored-by: Valerii Reutov <valeriy.reutov@gmail.com> Co-authored-by: Pavlo Botnar <pavlo.botnar@gmail.com>

miker83z force-pushed the vm-lang/aa-auth/authenticator-and-package-metadata branch from 9a4832e to 84c27eb Compare December 2, 2025 13:29

valeriyr approved these changes Dec 3, 2025

View reviewed changes

Dkwcs reviewed Dec 3, 2025

View reviewed changes

crates/iota-framework/packages/iota-framework/sources/package_metadata.move Show resolved Hide resolved

Dkwcs approved these changes Dec 3, 2025

View reviewed changes

fix(framework): duplicate modules in create_package_metadata_v1_for_t…

d43cb09

…esting

alexsporn reviewed Dec 3, 2025

View reviewed changes

alexsporn approved these changes Dec 3, 2025

View reviewed changes

refactor(framework): split ptb module and refactor public functions

ac957d3

feat(framework-snapshot): update snapshot

0ea476d

miker83z linked an issue Dec 3, 2025 that may be closed by this pull request

Interface considerations for programmable_transaction.move #8467

Closed

update snapshots

a3589ea

miker83z merged commit 35a7637 into vm-lang/aa-auth/8805-beta-feature-branch Dec 4, 2025
58 of 66 checks passed

miker83z deleted the vm-lang/aa-auth/authenticator-and-package-metadata branch December 4, 2025 13:12

miker83z mentioned this pull request Jan 19, 2026

feat: Account Abstraction beta #9586

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(execution): create a package metadata object at publish time#9461

feat(execution): create a package metadata object at publish time#9461
miker83z merged 5 commits intovm-lang/aa-auth/8805-beta-feature-branchfrom
vm-lang/aa-auth/authenticator-and-package-metadata

miker83z commented Nov 27, 2025 •

edited

Loading

Uh oh!

vercel bot commented Nov 27, 2025 •

edited

Loading

Uh oh!

Uh oh!

thibault-martinez left a comment

Uh oh!

Uh oh!

alexsporn Dec 3, 2025

Uh oh!

miker83z Dec 3, 2025

Uh oh!

alexsporn Dec 3, 2025

Uh oh!

miker83z Dec 3, 2025

Uh oh!

alexsporn Dec 3, 2025

Uh oh!

miker83z Dec 3, 2025

Uh oh!

alexsporn left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

Conversation

miker83z commented Nov 27, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description of change

How the change has been tested

Release Notes

Uh oh!

vercel bot commented Nov 27, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

thibault-martinez left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

alexsporn Dec 3, 2025

Choose a reason for hiding this comment

Uh oh!

miker83z Dec 3, 2025

Choose a reason for hiding this comment

Uh oh!

alexsporn Dec 3, 2025

Choose a reason for hiding this comment

Uh oh!

miker83z Dec 3, 2025

Choose a reason for hiding this comment

Uh oh!

alexsporn Dec 3, 2025

Choose a reason for hiding this comment

Uh oh!

miker83z Dec 3, 2025

Choose a reason for hiding this comment

Uh oh!

alexsporn left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

miker83z commented Nov 27, 2025 •

edited

Loading

vercel bot commented Nov 27, 2025 •

edited

Loading